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Amendment to the Claims; 

L (Currently Amended) A system for providing controlled access to an object and other 
associated information [[a]] file by a plurality of users comprising: 

means for establishinp an nbiect. the nhiect comprising distinguishable groups of data, 
each group of data having associated access criteria for access to the gro ups of data; 

a database for storing [an] the object and associated information, tho objoot comprising 
distmguiohable groups of data, e ach group of data having apoociatod accoGG criteria for aoo e s&* > 
tho groupo of data ; 

means for establishing access criteria whe rein each group of data has an associated user 
privilege for identifying separate groups of infor mation to which user may have access to the 
groups of data and setting a user's TP inclu ^f? defining which users are allowed to access the 
object and associated information and associated user privileges; 

a central processing, ud it (CPU) for controlling the access to the database in, accordance 
with the access criteria ; a memory for storing software code for controlling the operation of the 
CPU; 

a cache memory for storing user IP's: a cache memor y for storing user access criteria; 

and 

access application code stored in the memory and executable by the CPU, the application 
code being responsive to the user ID and user_a ccess criteria associated with the groups of data 
contained within an object and to predetermined privileges for allowing controlled access to 
individual groups of data contained within the object by an individual user according to the user's 
access privileges, thereby transmitting a red acted object to the user wherein transmitting a 
redacted object includes sending an electronic object to the u ser that contains the groups of 
information to which the user has access to and that e xcludes groups of information to which the 
user does not have access. 

2. (Original) A system according to claim 1, wherein access includes the ability of a user to read 
the contents of the requested object 
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3. (Original) A system according to claim 2 7 wherein access includes the ability to modify the 
contents of the requested object. 

4. (Original) A system according to claim 3, wherein the ability to modify includes the ability to 
delete information contained in the requested object. 

5. (Original) A system according to claim 3, wherein the ability to modify includes the ability to 
add data to the requested object. 

6. (Original) A system according to claim 1 wherein the access is determined by a business 
relationship to produce products and defined by the host according to the need of information in 
the product chain. 

7. (Currently Amended) A method of controlling access to objects stored in electronic form, 
comprising: 

Shushing an object including l o sing information into the object into separate groups 
ftaving separate nrivile f e access criteria; 

storing [(anft M object, the object comprising distinguishable groups of data; 

Publishing access criteria, wherein each group of data having an associated user 
privilege includ in g identifying S ^ate groups of information to which the user may have access 

criteria for access to the groups of data; 

srtW a user's m including de fining which users are allowed to access the object and 

associated information and user privileges: 

controlling the access to the database using a central processing unit (CPU) according to 
the access criteria; 

storing software code for controlling the operation of the CPU in memory; and 
yprif yinp a user's user privilege a ccess criteria including extracting the user's u ser 
identification fr™ the object reai ^ t verifying first in cache memorY and if not in cache then , in 
main memorv the user's user identification and identifying the groups of data to which fcg 
h a * access and priv ile ges with respect thereto thereby allowing controlled access to individual 
groups Of data contained wiihin tnc object by ai» individual us « according to th* user's privileges 
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in response to the access criteria associated with the groups of data contained within an object 
and to predetermined privileges npnn verificati on of user ID and user privileges, searching first 
in cache and if not found in memory then in main memory and retrieving the data requested 
according to the usert access criteria and transmitting a r edacted object to the user, wherein 
transmitting a redacted object includes sen d ing an electronic object to the user that contains the 
groups of information to which the user has access to and that excl udes groups, of information to 
which the user does not have access, 



8-12 (Canceled) 

13. (Currently Amended) A computer program product for use with a computer system, a central 
processing unit and means coupled to the central processing unit for storing a database to 
automatically manage objects for viewing and marking an object having varying formats without 
the use of any originating application of a file to view the object, comprising: 

computer readable code means for establishing an object in a storage location including 
lo ading information into the object into separate g roups having separate privilege access criteria; 

storing the object, the object comprisi ng distinguishable groups of data: 

computer readable code means for identifying a user to have access to the object; 
computer readable code means for establishing privilege access criteria that define the scope of 
access of the object for the user whereby each group of data has an associated u ser privilege that 
define the scope of access of the object for the user : including identifying separate groups of 
information to which the user mav have access crite ria for access to the groups of data; setting a 
user's TP inditing admins which users are allowed to aecesSJ tfre object and associated 
information a nd user privileges; 

computer readable code means for receiving an object request by a ujer «*jaestef ; 
computer readable code means for verifying the user's user privilege access criteria including, 
extracting the user's user identification from the objec t request verifying first in cache memory 
and if not in cache then in main memory the u ser's user identificat ion and identifying the groups 
of data to which the user has access and privileges with res pect thereto thereby allowing 
controlled access to individual groups of data contain ed within the object by an individual user 
according to the user's privileges in response to the access criteria associated with the groups of 
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data contained within an object and to redetermined privi l eges upon verification of user TP and 
user privileges, searching first in cache and if not found in m e mory then in main memory and 
retrieving the data requeste d according to the user's access criteria : and 

computer readable code means for transmitting a redacted document according to the 
USeiS user privilege access criteria including sending an electronic object to the user 

that contains the groups of information to which the user has access to and th H excludes g roups 
of information to which the user does not have acces s. 

14. (Currently Amended) A computer program device, comprising: 

a computer program storage device readable by a digital processing apparatus; 
a program stored on the program storage device and including instructions executable by 
the digital processing apparatus for controlling the apparatus to perform a method of managing 
documents for viewing and marking an object having varying formats without the use of any 
originating application of a file to view the object stored in the file, comprising: 

establishing an object in a storage location including loading information ft tn th, nhj^t 
into separate groups ha ving separate privilege access criteria ; 

storing, the object, the object comprising , distinguishable groups of data ; 
identifying a user to have access to the object; establishing privilege access criteria that 
define the scope of access of the object for the user; 

receiving [[a]] an object request by a user «e^»stef; verifying the user's fequeste** user 
privilege access criteria including extracting the user's user identification from the object req uest, 
verifying first in c ache memory a n d i f not in cache then in main memory the user's user 
identificatio n and identifying the groups of data tn whinh tb* USfer has access and privileges with 
respect thereto thereby allowing controlled access to individu a l grouns nf data contained within 
the obfect by an individual user according to th e user's privileges in response to the access 
criteria associated with the groups of data co n tained within an object and to predetermine^ 
privileges upon verification of user ID and user p rivileges, searcjnjjg first in cache if m 
found in memory then in main memory and retrieving the data requested acc ording to the user's 
access criteria ; and 

transmitting a redacted object according to the user's seqyes*** user privilege access 
criteria including sending an electronic object to the u^ r that contains the groups of i nformation 
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to which the user has access to and that excludes groups of information to which the user does 
not have access . 

15. (Currently Amended) In a computer server having a data base for storing data pertaining to 
product information, a method of securely transferring data between a source and an access 
destination comprising: 

establishing an object in a storage location including loading information into the object 
into separate groups ha ving separate privilege access criteria: 

storing the obje ct , the objec t co mprising distinguishable groups of data, identifying a user 
to have access to the object; 

establishing privilege access criteria wherein each group of data has an associated user; 
PS™ 1 ^ mat definc toe scope of access of the object for the use r, including identifyin g separate, 
groups of information to which the user mav have a c cess criteria for access to the groups of data: 
setting a user's ID including defining which users are allo w ed to access the object and associated 
information and uger, privileges; receiving a object request by a user, requeotof; verifying the 
userls roqwotor'fi user privilege access criteria including extracting rhe user's user identification 
frprn , the object request, verify i ng fir st in cache memory and if not in cache then in main memory 
the user's user , identification and identifying the groups of d ata to which the user has access and 
privileges with respect thereto thereby allowing controlled access to individual group * of data 
contained within the object by an individual user according to th* u s er's privileges in r^ nc. t„ 
the access criteria associated with the g r oups of data contained within an object and tn 
predetermined privile ges upon verific at ion of user ID and user privileges, searching first in 
cache and if not found in memory then in m ain m emory and retrieving the data requested 
according to the user's access criteria; and transmitting a redacted object according to the user's 
«q*es**!s user privilege access criteria including sending an electronic object to the user that 
contains the groups of information to which the user has access to and that excludes g roups nf 
information to which the user does not have access. 

16. (New) The system of claim 1 further including means for sending an electronic object to the 
user that contains the groups of information to which the user has access to and that excludes 
groups of information to which the user docs not have access. 
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